Unauthenticated Access Vulnerability in Oracle E-Business Suite Component

CVE-2024-21029

Summary

This vulnerability in Oracle's Complex Maintenance, Repair, and Overhaul component of the E-Business Suite allows unauthenticated attackers with network access via HTTP to exploit the system. Successful exploitation hinges on the interaction of a third party, not the attacker. This could lead to unauthorized updates, insertions, or deletions of data, as well as unauthorized read access to certain data within Oracle Complex Maintenance, Repair, and Overhaul. Attackers could potentially affect other interconnected products, broadening the impact of the vulnerability beyond the initial target.

References